Privacy Policy
How enquiry and book-registration details are processed on the professional website of Yosra Fraj.
Updated 17 October 2026
1. Who is responsible for your data?
Accuracy SUARL, a company registered in Tunisia, operating the professional website of Yosra Fraj, is the controller of personal data submitted through the website contact and book forms. Registered office: Ariana Center, Bureau C408, 2080 Ariana, Tunisia. Privacy contact: contact@accuracy.expert. See our legal notices.
2. What data is collected, and why?
| When | Data and purpose | Legal basis when GDPR applies |
|---|---|---|
| Contact / discovery enquiry | Name, email, message, requested service and priorities; company name if supplied. Used to respond, assess fit and discuss a potential engagement. | Pre-contractual steps at your request, or legitimate interests in handling business enquiries, depending on context. |
| Book-interest registration | Name, email, optional professional role and your opt-in. Used solely to send Chapter 1 when available and one launch announcement. | Your consent. You can withdraw it at any time without affecting previous processing. |
| Technical operation | The hosting provider may process IP addresses, request logs and security-related metadata necessary to deliver and protect this website. | Legitimate interests in website security and operation, where applicable. |
The fields marked as required on each form are necessary to answer your request or register for the book update. Other fields are optional. Please do not send personal financial records, special-category data or confidential business files in these forms.
Express consent: both forms include an unticked consent checkbox and a link to this notice. The form submission includes a client-generated consent date and the policy version. These records do not replace any required administrative filings or cross-border transfer authorisations.
3. Service providers and recipients
Form submissions are sent to Web3Forms (Web3Creative), which processes the form data on behalf of the site operator. Its published privacy policy (updated 13 July 2026) identifies AWS, Cloudflare and Hetzner as infrastructure providers and describes possible use of anti-spam services. Notifications are also received through the site operator’s email provider, whose identity must be confirmed in the publication checklist before deployment.
Website hosting and delivery are supplied by Netlify, Inc. These providers may access information where necessary to provide their services. Information is not sold by us, and signing up for the book does not enroll you in a general marketing newsletter.
4. International processing and transfers
The site operator is based in Tunisia. Web3Forms says it operates from India and uses infrastructure across multiple regions. Form submission and notification handling may therefore involve processing outside Tunisia and outside the European Economic Area. Web3Forms states that it relies on contractual safeguards, including Standard Contractual Clauses for EEA-origin data; the operator must verify the applicable Data Processing Agreement and transfer arrangements before using the service.
Tunisian data-protection law may impose declaration and prior authorisation requirements for international transfers. Any applicable EU GDPR requirements must also be assessed for this cross-border service.
5. How long is the information kept?
Contact enquiries: The intended working retention is up to 12 months after the last substantive correspondence if no commercial relationship begins. Book list: Until Chapter 1 and the single launch announcement are delivered, withdrawal, or a review at 24 months, whichever comes first. Records necessary for a resulting business engagement may be retained separately under applicable contractual, accounting and legal obligations.
These are the site operator's intended retention periods, not automatic deletion guarantees. Web3Forms' current public policy permits retention of submission data for up to three years by default unless the operator chooses a shorter setting. Provider-side copies may remain longer than our intended working retention periods; applicable service settings and deletion procedures must be verified before the policy is finalised. Netlify may process technical access and security logs. Their precise retention period, applicable service settings and data-processing arrangements have not yet been verified by the website operator.
6. Your rights
Depending on the law applicable to your request, you may ask for access, correction, deletion, restriction or portability of your data, object to certain processing, or withdraw consent for book updates. Contact contact@accuracy.expert. We may request only the information needed to verify identity. You may also raise a complaint with the Tunisian INPDP, or with a competent EEA supervisory authority where GDPR applies.
7. Cookies, links and automated decisions
The supplied website code contains no advertising pixels, embedded social feeds or non-essential analytics tools and does not itself place analytics or marketing cookies. The hosting environment must still be verified. The LinkedIn link takes you to a separate website with its own privacy policy. No automated profiling or solely automated decision-making is implemented in the supplied forms.
If non-essential cookies, analytics or embedded booking tools are installed later, this notice must be updated and any consent requirements assessed before those tools are activated.
8. Security and updates
Form information is submitted over HTTPS to the form provider. No internet transmission is risk-free; avoid including sensitive details in initial enquiries. This notice may be revised when services, providers or legal requirements change; the current revision date appears above.